@soushians/starter (>=1.0.93, <=1.0.939), angular-reusable-components (2.0.82) +5 more potentially affected by CVE-2021-4231 via @angular/language-service (>=5.0.0, <=5.2.0)

@angular/language-service NPM version =5.0.0, =1.0.93, =1.2.9, =4.0.3, =0.0.1, =0.3.0 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@mxtommy/kip (>=1.1.1, <=1.1.2), angular-nest-starter (0.1.0) +4 more potentially affected by CVE-2021-4231 via @angular/platform-server (>=9.0.0, <=9.1.11)

@angular/platform-server NPM version =9.0.0, =1.1.1, =0.0.0, =0.0.1 - jio-digiapi-auto-mate-plus-ui-app 1.2.0 - node-angular-app-template 0.0.1 - shared-encoding-library 0.0.0 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@afarooq/odinesolutions (0.0.0), @agrobot/ng-ui-elements (0.0.0) +387 more potentially affected by CVE-2021-4231 via @angular/animations (>=7.0.0, <=7.2.14)

@angular/animations NPM version =7.0.0, =2.0.0, =9.25.1, =1.0.2-1.beta.1, =0.0.1, =0.0.1, =0.0.1, =0.0.3, =0.0.2, =0.0.2, =0.2.2 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@topibd/core (>=0.2.4, <=0.2.5), fusing-angular (>=0.0.0, <=0.0.17) +5 more potentially affected by CVE-2021-4231 via @angular/service-worker (>=6.0.0, <=6.1.9)

@angular/service-worker NPM version =6.0.0, =0.2.4, =0.0.0, =0.0.0, =2.6.2, =2.8.0 - kahla 2.2.0 - topibd-core 0.2.3 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

angular-io-bretwang (1.0.0), angular-io-bretwang02 (1.0.0) +13 more potentially affected by CVE-2021-4231 via @angular/upgrade (>=5.0.5, <=5.2.9)

@angular/upgrade NPM version =5.0.5, =1.0.0, =1.0.0, =1.0.0, =1.0.6, =1.0.48, =5.0.6, =1.0.0, =1.0.3 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@altariotechnologieslisbon/seed-pro (>=0.0.1, <=0.1.0), @bi8/am-data-table (>=8.0.0, <=8.0.2) +475 more potentially affected by CVE-2021-4231 via @angular/common (>=8.0.0, <=8.2.13)

@angular/common NPM version =8.0.0, =0.0.1, =8.0.0, =8.0.0, =1.0.0, =1005.9.0, =8.0.2, =7.0.0-internal-20190531-1650, =1.0.6, =1.0.30 and more Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

@c8y/apps (>=9.25.1, <=1005.8.0), cmf.angular (2.0.0-71817) +2 more potentially affected by CVE-2021-4231 via @angular/upgrade (>=7.0.0, <=7.2.13)

@angular/upgrade NPM version =7.0.0, =9.25.1, =0.5.5, =2.0.0-beta.1, =2.0.0-beta.2 Source cves: CVE-2021-4231 Source advisory: MEND:CVE-2021-4231...

PT-2022-11586

Name of the Vulnerable Software and Affected Versions Angular versions 11.0.4 through 11.1.0-next.2 Description A vulnerability was found in the handling of comments, which can lead to cross site scripting. The manipulation can be launched remotely, but it might require authentication first...

CVE-2021-4231: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to...

@angular-devkit/build-angular (>=0.8.8, <=0.900.0-rc.8), @apployees-nx/node (>=0.0.1, <=0.0.21) +159 more potentially affected by CVE-2019-15598 via tree-kill (>=1.0.0, <=1.2.1)

tree-kill NPM version =1.0.0, =0.8.8, =0.0.1, =0.0.1-alpha.1, =1.2.2, =6.0.0-beta.0, =0.0.1, =0.0.1, =2.0.0-beta.22, =2.0.0-beta.1, =1.0.0, =0.0.1, =0.2.0, =7.0.2 and more Source cves: CVE-2019-15598 Source advisory: OSV:GHSA-J7FQ-P9Q7-5WFV...

Security Bulletin: A security vulnerability has been identified in Angular shipped with Tivoli Business Service Manager (CVE-2022-25844)

Summary Angular is shipped with IBM Tivoli Business Service Manager. Information about a security vulnerability affecting Angular has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...

Auth0 angular-jwt misinterprets allowlist as regex

Auth0 angular-jwt before 0.1.10 treats whiteListedDomains entries as regular expressions, which allows remote attackers with knowledge of the jwtInterceptorProvider.whiteListedDomains setting to bypass the domain allowlist filter via a crafted domain. For example, if the setting is initialized...

GHSA-VM2P-F5J4-MJ6G Auth0 angular-jwt misinterprets allowlist as regex

Auth0 angular-jwt before 0.1.10 treats whiteListedDomains entries as regular expressions, which allows remote attackers with knowledge of the jwtInterceptorProvider.whiteListedDomains setting to bypass the domain allowlist filter via a crafted domain. For example, if the setting is initialized...

angular-lunarc-blog (>=0.0.1, <=0.0.3), angular-lunarc-core (>=0.0.2, <=0.0.5) +15 more potentially affected by CVE-2018-11537 via angular-jwt (>=0.0.7, <=0.1.9)

angular-jwt NPM version =0.0.7, =0.0.1, =0.0.2, =0.0.1, =4.0.0, =1.0.0, =2.0.0, =4.0.0, =3.0.19, =3.1.0, =7.0.0, =3.0.0, =1.0.0-alpha.6, =0.2.4, =0.0.1, =0.5.0 and more Source cves: CVE-2018-11537 Source advisory: OSV:GHSA-VM2P-F5J4-MJ6G...

angular-lunarc-blog (>=0.0.1, <=0.0.3), angular-lunarc-core (>=0.0.2, <=0.0.5) +15 more potentially affected by CVE-2018-11537 via angular-jwt (>=0.0.7, <=0.1.9)

angular-jwt NPM version =0.0.7, =0.0.1, =0.0.2, =0.0.1, =4.0.0, =1.0.0, =2.0.0, =4.0.0, =3.0.19, =3.1.0, =7.0.0, =3.0.0, =1.0.0-alpha.6, =0.2.4, =0.0.1, =0.5.0 and more Source cves: CVE-2018-11537 Source advisory: GHSA-VM2P-F5J4-MJ6G...

GHSA-88FH-8979-Q2RR Angular Redactor XSS Vulnerability

Imperavi Redactor 3 in Angular Redactor 1.1.6, when HTML content mode is used, allows stored XSS, as demonstrated by an onerror attribute of an IMG element, a related issue to CVE-2018-7035...

Angular Redactor XSS Vulnerability

Imperavi Redactor 3 in Angular Redactor 1.1.6, when HTML content mode is used, allows stored XSS, as demonstrated by an onerror attribute of an IMG element, a related issue to CVE-2018-7035...

Regular Expression Denial Of Service (ReDoS)

angular is vulnerable to regular expression denial of service. An attacker can crash the application by providing a very high value of custom locale rule through the posPre attribute in the parsePattern function of parser.js...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +2670 more potentially affected by CVE-2022-25844 via angular (>=1.7.0, <=1.8.3)

angular NPM version =1.7.0, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2022-25844 Source advisory: OSV:GHSA-M2H2-264F-F486...

10.30.npm-learning (>=1.0.0, <=1.1.0), 2017_node (1.0.0) +2670 more potentially affected by CVE-2022-25844 via angular (>=1.7.0, <=1.8.3)

angular NPM version =1.7.0, =1.0.0, =4.13.7-rc4, =1.103.1, =1.103.1, =1.102.4, =1.102.3, =1.102.3, =1.4.156, =1.0.3, =1.0.0, =1.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2022-25844 Source advisory: GHSA-M2H2-264F-F486...